GO-2025-3528
containerd has an integer overflow in User ID handling in github.com/containerd/containerd
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2024-40635
- Alias
- GHSA-265r-hfxg-fhmg
Description
containerd has an integer overflow in User ID handling in github.com/containerd/containerd
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/containerd/containerd | introduced 0, fixed 1.6.38, introduced 1.7.0-beta.0, fixed 1.7.27 |
| Go · github.com/containerd/containerd/v2 | introduced 0, fixed 2.0.4 |
Références
- https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg ADVISORY
- https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da FIX
- https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20 FIX
- https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |